$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: XhWg4IxafRvym1HMJSwsrMllOoh9N7EtonsGGxK5qwY= Subject key identifier: F2:22:85:2E:35:1B:6F:36:3C:78:F6:37:89:2D:33:78:D3:C3:F0:1A Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 082F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 081F Signing time: Mon 30 Jun 2025 21:00:31 +0000 Manifest this update: Mon 30 Jun 2025 21:00:31 +0000 Manifest next update: Mon 07 Jul 2025 21:00:31 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: Mpij++k2lp5/G0N2CKDWzbLh+dFSMOzdjdY0CWjEtu4=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Jun 30 21:00:31 2025 GMT Not After : Jul 7 21:00:31 2025 GMT Subject: CN=6862faef-06c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:d2:48:7f:fc:19:82:f7:74:f4:ff:e5:60: 6e:1c:b6:80:38:d0:5a:4b:a5:ed:67:88:1a:36:69: ca:42:13:15:9f:1b:c2:c4:b3:ba:91:4f:9d:bc:72: 6d:51:e9:59:1c:e0:cd:a2:98:8f:1a:dd:30:1c:1c: fe:80:83:49:7a:ec:59:b9:61:d6:43:e3:7f:e2:e9: f5:d4:d2:25:82:e7:d9:d0:63:f3:cb:33:4d:f0:5e: ee:6a:ef:c8:8d:88:f3:6a:b8:76:79:d8:19:26:7e: 8e:d2:16:4c:46:93:90:88:e9:57:cb:0f:3f:71:60: fc:52:8a:ed:8d:32:27:f2:48:36:43:5b:53:c7:a4: ac:2f:bd:8f:07:2c:81:00:5f:06:61:48:e7:67:06: 21:6a:70:19:ab:53:5d:04:2f:68:91:d3:34:80:07: ee:2f:0a:52:56:60:11:d0:14:8c:3a:60:3f:46:f5: bd:b7:b8:c8:59:6d:db:dd:4a:dd:30:f5:fc:40:ce: c1:2d:b9:fd:65:83:17:5b:0c:e3:87:ef:e7:d5:95: a1:0c:b2:ba:43:c6:e6:7c:a9:f5:39:30:0a:21:15: 55:7f:b5:d1:4a:63:92:fe:d0:19:8a:2a:0d:be:90: 01:19:6d:f4:42:8c:aa:7c:d1:64:13:a9:fa:66:bc: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:85:2E:35:1B:6F:36:3C:78:F6:37:89:2D:33:78:D3:C3:F0:1A X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:11:2b:1c:e5:7d:85:3a:56:0e:a2:05:73:e7:e3:0b:9d:a6: 03:14:9b:8b:06:cf:3c:50:a6:e2:af:ad:42:ab:86:f5:02:aa: 10:bd:b2:75:3b:8f:e6:d9:3b:6d:a9:42:eb:35:3e:ae:e5:fb: 93:ee:c3:60:77:18:c7:3b:71:5f:a9:4f:00:a8:cd:c4:0b:34: e8:a3:64:90:d4:8d:92:c4:a4:7a:91:91:c3:84:6d:84:12:9c: 89:0c:af:2f:38:b5:b2:f6:31:d9:c1:d5:f0:3b:fb:5d:56:74: e6:9a:82:aa:c0:70:57:03:9e:3e:65:dc:18:c5:ed:cf:ad:4d: 14:74:0d:ba:b6:fb:c6:16:44:69:3f:80:06:f5:1a:43:2d:f0: cb:50:92:84:33:96:86:9b:09:f7:ed:f9:6f:9e:f8:1b:59:25: fd:d8:93:01:7c:db:b5:17:fe:f6:ac:6d:1b:70:58:22:90:21: 16:c6:0c:9e:85:dd:54:5c:dc:a3:a5:0a:1d:3a:dc:e0:83:f5: 85:0e:00:e9:dd:5e:f0:c4:46:5b:be:36:01:07:9a:93:9d:d4: c4:07:4d:eb:16:f2:f1:c5:10:c3:cf:ed:39:8a:03:d8:1d:3b: 70:51:7f:53:65:f5:62:b0:4c:31:5b:1d:2c:88:ad:a6:93:93: 87:d8:16:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNjMwMjEwMDMxWhcNMjUwNzA3MjEwMDMxWjAYMRYwFAYD VQQDEw02ODYyZmFlZi0wNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xjSSH/8GYL3dPT/5WBuHLaAONBaS6XtZ4gaNmnKQhMVnxvCxLO6kU+dvHJt UelZHODNopiPGt0wHBz+gINJeuxZuWHWQ+N/4un11NIlgufZ0GPzyzNN8F7uau/I jYjzarh2edgZJn6O0hZMRpOQiOlXyw8/cWD8UortjTIn8kg2Q1tTx6SsL72PByyB AF8GYUjnZwYhanAZq1NdBC9okdM0gAfuLwpSVmAR0BSMOmA/RvW9t7jIWW3b3Urd MPX8QM7BLbn9ZYMXWwzjh+/n1ZWhDLK6Q8bmfKn1OTAKIRVVf7XRSmOS/tAZiioN vpABGW30QoyqfNFkE6n6Zry6oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIihS41 G282PHj2N4ktM3jTw/AaMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfESsc5X2FOlYOogVz5+MLnaYDFJuLBs88UKbir61Cq4b1AqoQvbJ1 O4/m2TttqULrNT6u5fuT7sNgdxjHO3FfqU8AqM3ECzToo2SQ1I2SxKR6kZHDhG2E EpyJDK8vOLWy9jHZwdXwO/tdVnTmmoKqwHBXA54+ZdwYxe3PrU0UdA26tvvGFkRp P4AG9RpDLfDLUJKEM5aGmwn37flvnvgbWSX92JMBfNu1F/72rG0bcFgikCEWxgye hd1UXNyjpQodOtzgg/WFDgDp3V7wxEZbvjYBB5qTndTEB03rFvLxxRDDz+05igPY HTtwUX9TZfVisEwxWx0siK2mk5OH2BbV -----END CERTIFICATE-----Generated at Wed Jul 2 19:11:06 2025 by rpki-client